Source: TechCrunch
The EFF's discovery exposes a gap between developer intent and actual data flows. Many Android developers don't know that SDKs and libraries they integrate harvest and sell precise location data to advertising networks. This creates liability and trust risks for developers themselves, not just users—they're facilitating data sales without explicit knowledge or consent mechanisms. App ecosystem auditing and supply chain transparency are now baseline compliance requirements.